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(54) Sharing of web session environment Information 



(57) A Web user interface session is initialed in 
such a way as to allow certain contextual environmental 
information associated with a user, including session 
properties such as user name, user role, and locale, to 
be shared between all applications invoked (50) during 
the web user interface session. Application program- 
ming interfaces (APIs) (64) are disclosed that provide 



access to the environmental information for both com- 
mon gateway interface (CGI) programs (62) as well as 
Java applets (74). The sharing of the environmental 
information between session applications allows a con- 
sistent user interface to be presented to the user during 
the session. 
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Description 

FIELD OF THE INVENTION 

[0001] The present invention relates generally to win- 
dows-based computer applications, and more particu- 
larly to a web user interface session and the sharing of 
session context information in such a session. 

BACKGROUND OF THE INVENTION 

[0002] Today Web applications launched from a par- 
ticular Web browser instance generally operate inde- 
pendently. They do not know about each other or share 
any common properties. For example, Common Gate- 
way Interface (CGI) programs and Java applets get their 
environment from different sources. A CGI program is 
configured by passing it CGI tokens through the univer- 
sal resource locator (URL) or querying the user. A Java 
applet is configured by Java applet parameters or que- 
rying the user. There is no common mechanism for 
sharing information across Web applications. 
[0003] A current mechanism that can be used to share 
information across some Web applications is Web 
browser cookies. A named Web browser cookie can be 
shared by multiple CGI programs. While the Web 
browser cookie is an enabling mechanism, it is insuffi- 
cient in itself due to some limitations. First, Web browser 
cookies are not directly accessible by Java applets. 
Second, many Web browsers have a per server limit on 
the number of Web browser cookies and the size of 
Web browser cookies (in order to avoid attacks from 
malicious programs); this puts a fixed upper limit on the 
amount of information that can be shared via Web 
browser cookies. 

[0004] Two other aspects relevant to the concept of a 
Web session are missing from today's situation. First 
there is no program to initialize the session context 
information so that it can be inherited by other Web 
applications. Initializing the session context information 
may involve allowing the user to set session properties. 
Second, there is no unified login model to authenticate 
the user and determine the user's access rights for the 
session. There are Web server-specific security mecha- 
nisms, but these do not provide authentication and 
authorization information to Web applications in a plat- 
form-independent manner. 

SUMMARY OF THE INVENTION 

[0005] It is therefore an object of the present invention 
to be able to initialize contextual environmental informa- 
tion of a Web user interface session so that it can be 
shared with other valid applications of the same Web 
user interface session. 

[0006] Therefore, according to the present invention, 
a method for the sharing of session environment infor- 
mation between session applications during a Web user 



interface session is disclosed. The Web user interface 
session is initialized so as to allow certain session prop- 
erties associated with a user, such as user name, user 
role, and locale, to be shared between all applications 

5 invoked during the Web user interface session. Applica- 
tion programming interfaces (APIs) are disclosed that 
provide access to the environmental information for 
both common gateway interface (CGI) programs as well 
as Java applets. The sharing of the environmental infer- 

10 mation between session applications allows a consist- 
ent user interface to be presented to the user during the 
session. 

[0007] To accomplish this sharing of session proper- 
ties between applications, the user first performs a login 

is to the session during which the user name and pass- 
word are entered by the user. If the user is validated, the 
Web user interface session is initiated and the session 
properties of the environment of the session are 
defined. An initial session application of the session is 

20 opened, based on the universal resource locator (URL) 
submitted by the user to the web browser to initiate the 
session. Any applications that are subsequently opened 
during the Web user interface session from the initial 
session application will share the session properties of 

25 the environment. 

[0008] Session information is shared among Web 
applications through a session manager program that 
maintains the session properties that define the envi- 
ronment for the session. Common gatway interface 

30 (CGI) programs access these session properties by 
using interprocess communication (IPC) to make 
requests to the session manager program. Java applets 
access these session properties through a specific 
common gateway interface (CGI) program that returns 

35 the session properties in a specified formal. 

[0009] Communication with the session manager pro- 
gram to get session properties occurs as follows. The 
requesting session manager connects to a port on 
which the session manager program is listening. Next, 

40 the requesting session application provides a session 
number, a remote IP address of the session, and a 
request for the session properties to the session man- 
ager program. The session number is derived from a 
special Web browser cookie. If the session number and 

45 the remote IP address match those of the session, then 
the session manager program releases the session 
property information to the requesting session applica- 
tion. 

so BRIEF DESCRIPTION OF THE DRAWINGS 

[0010] The novel features believed characteristic of 
the invention are set forth in the claims. The invention 
itself, however, as well as the preferred mode of use. 
55 and further objects and advantages thereof, will best be 
understood by reference to the following detailed 
description of an illustrative embodiment when read in 
conjunction with the accompanying drawing(s), 
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wherein: 

Figure 1 illustrates the components of a web 
launcher that are involved in session initialization 
and login procedures, according to the present 
invention; 

Figure 2 illustrates a session login window, accord- 
ing to the present invention; 

Figure 3 illustrates a diagram for initializing a 
launcher window; according to the present inven- 
tion; 

Flgure4 illustrates a launcher window, according to 
the present invention; 

Figure 5 illustrates a diagram for invoking URLs to 
start session Web applications, according to the 
present invention; 

Figure 6 is a diagram that shows the components 
of the Web launcher that are involved in the C lan- 
guage binding for the session API for CGI pro- 
grams. accorcBng to the present invention; and 

Figure 7 is a diagram that shows the components 
of the Web launcher that are involved in the Java 
language binding for the session API for Java 
applets. 

DESCRIPTION OF THE INVENTION 

[001 1 ] The present invention introduces the concept 
of a Web user interface (Ul) session and the sharing of 
session environment information during such a Web Ul 
session across Web applications. A "Web application- is 
a computer program started as a result of invoking a 
URL via a Web browser. Common examples of Web 
applications are Java applets and Common Gateway 
Interface (CGI) programs. One of ordinary skill in the art 
will know that the term "Web" refers to both the Internet 
and, more particularly, to the World Wide Web or 
"WWW," a subset of the Internet. The Ul is commonly a 
graphical user interface, or GUI. 
[0012] A session refers to a group of applications 
associated with a particular user on a particular display. 
Thus, a set of programs that are tied together and func- 
tion as a group under the control of a single user at a 
single cfispiay station constitute a session. A Web Ul 
session is a set of Web applications launched from a 
particular Web browser instance. Not all of the Web 
applications launched from a particular Web browser 
instance need to belong to the same session. A Web 
browser instance may support multiple Web Ul ses- 
sions, as well as independent Web applications that do 
not belong to any session. 

[0013] A Web session is typically started when the 



user does a login. This brings up an initial application for 
the session, All applications then invoked through this 
initial application (through menu items, toolbar buttons, 
dialog boxes, tree list items, and so on) are also part of 

5 the session. This process is recursive, so that applica- 
tions invoked through applications invoked from the ini- 
tial application are all part of the Web Session. There is 
a common environment shared by all applications that 
are part of the Web session. This environment is a set 

iq of named properly values, such as user name, user 
role, locale (language), and so on that affects the 
behavior of all applications that belong to the session 
and allows them to provide a consistent Ul to the end 
user AQ the Web applications that belong to the session 

15 effectively share or "inherit" a common environment or 
set of context information. 

[0014] The initial application for a session may be a 
program that provides a top-level launcher. The sole 
purpose of this launcher is simply to present the user 
20 with the choice of Web applications that the user can 
request as part of the session. An example of a 
launcher window is shown in Figure 4. However, a ses- 
sion may not have a launcher presented as its initial 
application. The initial application may be any Web 
25 application. 

[0015] The Web Ul session is initiated when the user 
requests the launch URL via Web Browser. The launch 
program, shown as launch CGI program 14 in Figure 1 
and described below, brings up either the launcher win- 
so dow, shown in Figure 4, or an arbitrary URL that can be 
used to start the Web Ul session via a saved bookmark 
or to provide an "alternative launcher or top level entry 
point for a particular user. Depending upon whether 
login is enabled, the user will be requested to log in 
35 before the session is started. 

[0016] A Web Ul session is terminated in one of three 
ways. First, the session is terminated if the user exits 
the Web Browser. Second, the session is terminated if 
the session has been inactive for some configured 
40 period of time; for instance, the timeout period may be 
defined as nine hours of inactivity. If the session times 
out, the user will be asked to login again the next time 
an action is requested. Third, the session is terminated 
if the Web Server system is shutdown, thereby causing 
45 all current sessions associated with that Web Server to 
be terminated. 

[0017] The user typically logs into a Web Ul session 
by providing a login name and password. The user may 
additionally specify a locale, i.e. language, at login for 

so the display of localized data that remains in effect for the 
duration of the session. All applications started by the 
session inherit the locale information and are expected 
to honor it. There are two types of locale names - A Web 
locale name and an operating system (OS) locale 

55 name. Web locale names are platform-independent and 
are used by Java applets for localization. The OS locale 
names are platform-dependent and are used by CGI 
programs for localization. 
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[001 8] User authentication is accomplished through a 
user name and password. In addition to users, there are 
user groups. Users may be assigned to any number of 
user groups for authorization purposes. These user 
groups are also called user roles, since they determine 
the role that the user will assume when logged into the 
Web Ul session. For instance, there Is an access control 
list associated with each URL that the user can invoke 
through the launcher to ensure that the user is author- 
ized to launch a particular URL Only those URL actions 
that are valid for a users role will be visible in the 
launcher window. 

[001 9] Any application that is subsequently started as 
a pari of the session then inherits a common set of ses- 
sion information, such as session identity (ID) or 
number, the users name, the user's role, Web locale, 
and operating system (OS) locale. This session infor- 
mation is made available to applications that subse- 
quently join the session through an appropriate 
application programming interface (API), such as a C 
API for CGI programs and a Java API for Java applets. 
Additionally, session applications may create new ses- 
sion properties and set values for them, which are then 
shared by other applications belonging to the session. 
For example, there could be a property that represents 
a "selected node list." When a new application is started 
it can then immediately display some appropriate infor- 
mation for these nodes without asking the user to re- 
enter the node list. The sharing of common session 
information allows the applications that belong to a ses- 
sion to share a common environment or context, such 
as what locale (language) to use for displaying informa- 
tion to the user via the Ul. 

[0020] Referring now to Figure 1, diagram 10 illus- 
trates the components of the Web launcher that are 
involved in the session initialization and login proce- 
dures. Web Browser 18 is a management station or 
management console that has the appropriate Ul server 
software installed. For a given Web Browser 18 one 
Web Ul session is allowed per Web Server 16. Thus, 
Web Browser 18 may have multiple sessions, but only 
one session for Web Server 16. With multiple Web 
Browsers 18, a given user may have multiple sessions 
to Web Server 16. 

[0021] Sessionmgr program 20 is a program that 
maintains session state information and acts as a 
server for session information. Sessionmgr program 20 
listens on the port for session initiation requests that 
can come from either login program 22 or launch CGI 
program 14. Login program 22 is a CGI program that 
processes login requests and launch program 14 is a 
CGI program for starting a session and executing uni- 
versal resource locators (URLs). Sessionmgr program 
20 receives information from session conf ig file 26. user 
roles file 28, and user password file 32. Login CGI pro- 
gram 22 receives information concerning locale from 
I18N config file 30, as shown. 
[0022] The session requester, whether launch CGI 



program 14 or login CGI program 22, provides the fol- 
lowing information to sessionmgr: the user name, the 
user password, and the remote IP address. Upon ses- 
sion initialization, the following global values are 

s updated if they have changed: the user login, logging of 
logins to the session, logging of access to the session, 
and the session timeout The session timeout is the 
amount of time of non-activity, such as nine hours, after 
which the session will automatically terminate. 

io [Q023] The user is next validated, ff the user login 
function is off, then a session is created without further 
authentication. If, however, the user login function is on, 
the sessionmgr program 20 reads the user's password 
(originally created by htpasswd 24). ff the password 

is entered by the user matches the encrypted password 
for the user in the user password file 32, then the user is 
authenticated. Otherwise, sessionmgr program 20 will 
return an error, which will result in the login CGI pro- 
gram 22 displaying an HTML error message to the user, 

20 asking the user to retry to login procedure. 

[0024] Once the user has been authenticated, ses- 
sionmgr program 20 creates a session for the user 
along with the initial session. The user name, user roles, 
the remote IP address associated with the session, and 

25 so on, are stored for future reference throughout the 
session. Sessionmgr program 20 assigns a session 
number to the session and returns the session number 
to indicate that a session has been successfully cre- 
ated. 

30 [0025] The program requesting the session creation 
(either launch CGI program 1 4 or login CGI program 22) 
creates a Web browser cookie containing the session 
number. This Web browser cookie is used by subse- 
quent CGI programs to validate that a session exists. 

35 The existence of the cookie itself is not sufficient to 
determine that a session exists. This would not be 
secure, since it is relatively easy for a Web browser user 
to create a cookie. The CGI program validates a session 
by connecting to the port for sessionmgr program 20 

40 and passing the session number (obtained from the 
Web browser cookie) and remote IP address to session- 
mgr program 20. If there is an active session having this 
session number and the session is associated with the 
indicated remote IP address, then the session is vali- 

45 dated. This ensures that the user has previously been 
authenticated for the session (if required). 
[0026] As an example of session initialization proce- 
dure, consider the procedure for logging into the ses- 
sion. Login CGI program 22 is a CGI program that 

so processes login requests. It performs user authentica- 
tion, initiates sessions and requests the initial URL of a 
session. The algorithm of login CGI program 22 first 
determines if there is a session for this particular Web 
Browser 18. If there is a session, the program returns a 

55 message indicating that the user is already logged on. 
[0027] If there is no session, login CGI program 22 
tries to connect to sessionmgr program 20 on a port; 
sessionmgr program 20 maintains the session. If ses- 
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sionmgr program 20 is not currently running, then login 
CGI program 22 starts sessionmgr program 20. Once 
login CGI program 22 is connected to sessionmgr pro- 
gram 20, login CGI program 22 requests a new session 
and passes the following information to sessionmgr pro- 
gram 20: the user name, the user password, and the 
remote IP address. As shown in Figure 2, a login win- 
dow prompts the user for the user password and user 
name. The login window of Figure 2 defines the begin- 
ning of the Web Ul session and is one of the first win- 
dows that the user sees. Sessionmgr program 20 then 
creates the session and returns a session number if the 
user has been authenticated; the initial session number 
is randomly generated and this session number is incre- 
mented for each successive session. If the user is not 
authenticated, no session number is returned to login 
CGI program 22. Once the session is created, browser 
cookies that store the session number of the session 
and the user name (the latter is used to initialize the 
login screen if the user has to login again after a session 
timeout) are created. The user is successfully togged in 
once the session is created, if no URL is specified, the 
launcher window is displayed so that a URL may be ini- 
tiated. If a URL is specified, the URL is started. 
[0028] The launch CGI program 1 4 operates in similar 
fashion to login program 22. All actions launched from 
the launcher window, such as the launcher window 
shown in Figure 4, will be executed by launch CGI pro- 
gram 14. Launch program 14 first checks to see if the 
user has logged in to determine whether there is a valid 
session. If there is no session, then the login page is 
returned to the user and prompts the login procedure 
discussed above. If there already is a session, the spec- 
ified URL is invoked; this is the scenario depicted in Fig- 
ure 5. If no URL is specified, a launcher window is 
started. All the entries in the launcher window are URLs 
that are invoked via the launch CGI program. 
[0029] Referring now to Figure 3, the diagram 40 for 
initializing a launcher window is shown. The launcher is 
a Java applet 46 that provides the display of manage- 
ment functionality and the launching of that functionality 
through URLs. Java applet 46 displays available opera- 
tions to the user. When the launcher Java applet 46 f irst 
starts, it calls launchreg CGI program 42 to retrieve reg- 
istration information for the launcher window. The regis- 
tration information returned by launchreg CGI program 
42 is based on the user roles for the current session. 
Launchreg CGI program 42 obtains the user role list for 
the current session through the C session API, which 
connects to sessionmgr program 20, as shown. The 
launchreg CGI program 42 returns registration informa- 
tion based on the locale of the current session and fil- 
tered according to the user roles for which the user is 
authorized. The output of the launchreg CGI program 
42 is parsed by the launcher Java applet 46 to construct 
tree lists for presenting management functionality to the 
user. The user requests a URL by clicking on a desired 
leaf entry from the tree lists. 



[0030] Referring to Figure 4, an example of a 
launcher window seen by the user during a Web Ul ses- 
sion, according to the present invention, is shown. The 
set of tasks available in the launcher window of figure 4 

5 from which the user may choose include the following: 
Customers. Devices, Information and Reports, IT 
Resources and Applications, Networks (with IP Network 
bang a specific task of Network tasks). SLA's and Serv- 
ices, Software, Systems and Servers, and Other 

70 Objects. These tasks help define the session; the set of 
tasks is based on the user's login entered in the login 
window of Figure 2 and on associated user roles. Fig- 
ure 5 illustrates the components involved in invoking 
URLs. 

15 [0031] Session information may be requested by a 
Web application belonging to the session at any time 
during the session. Information is requested by con- 
necting to the port associated with sessionmgr program 
20, passing the session number and remote IP address, 

20 and requesting the session information. Session infor- 
mation is not provided to the requester if there is no 
active session corresponding to the provided session 
number or if the provided remote IP address does not 
correspond to the remote IP address for the session. 

25 For performance reasons, any request for session infor- 
mation returns all session information, in other words, 
client caching is done so that subsequent requests for 
other session information can be quickly serviced with- 
out requiring another interprocess communication (IPC) 

30 request to the sessionmgr program 20. 

[0032] The C session API is used by CGI programs to 
access session information while the Java session API 
is used by Java applets to access session information. 
Other language bindings for the session API (e.g., Perl) 

3$ are also possible. These APIs provide access to ses- 
sion information associated with a particular instance of 
a session and are the mechanism by which Web appli- 
cations share session environment information. As pre- 
viously mentioned, examples of session information 

40 include the name of the user, the roles of the user, and 
the locale used tor providing localization of the user 
interface. Other session properties can also be defined. 
The session APIs allow the caller to (1 ) verify that a ses- 
sion exists; (2) get specified pre-defined session prop- 

45 erties (e.g., user name); and (3) get and set developer- 
defined session properties (e.g.. selected nodes, time 
interval). In addition, the C version of the session API 
allows applications to specify that the login screen 
should automatically be presented if the user is not cur- 

so rently logged in (i.e., there is not a current session and 
login is required). 

[0033] Referring to Figure 6. diagram 60 shows the 
components of the Web launcher that are involved in C 
session APIs for CGI programs. When a URL is invoked 
55 by Web Browser 1 8 (perhaps through the launcher Java 
applet 46, shown in Figure 3). Web Browser 18 sends 
the request to Web Server 1 6. Web Server 16 starts the 
CGI program 62 identified by the URL The CGI pro- 
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gram is linked with a C Session API library 64 that con- 
tains the C Session API calls. When CGI program 62 
calls the C session API calls, an interprocess communi- 
cation (IPC) mechanism, such as TCP sockets, is used 
to communicate with sessionmgr program 20. which 
maintains session state information. C session API 
library 64 uses a special Web browser cookie to identity 
the session. The session number in the Web browser 
session cookie is passed to sessionmgr program 20 to 
identify the session. Sessionmgr program 20 returns the 
session information to the C session API library call 64 
through IPC and the C session API Iforary 64 in turn 
returns the session information to the requesting CQI 
program 62. 

[0034] Referring now to Figure 7, cfiagram 70 shows 
the components of the Web launcher that are involved 
in Java session APIs for Java applets. The Java session 
API illustrated in Figure 7 allows Java applets that are 
part of the same session to share session information. 
Java applet 74 uses a Java session class to access ses- 
sion information. When the Java session class is con- 
structed, it makes a request to Web Browser 18 to 
invoke the URL to access the sessioninfo CGI program 
72. Web Server 16 starts the sessioninfo CGI program 
72 identified by the URL. Sessioninfo program 72 imple- 
ments the Java session API and is linked with C session 
API library 64 as shown. When sessioninfo CGI pro- 
gram 72 calls the C session API calls 64. an interproc- 
ess control (IPC) mechanism, such as TCP sockets, is 
used to communicate with the sessionmgr program 20, 
which maintains session state information. The C ses- 
sion API library 64 uses a special Web browser cookie 
to identify the session. The session number in the Web 
browser session cookie is passed to sessionmgr pro- 
gram 20 to identify the session. Sessionmgr program 20 
returns the session information to sessioninfo program 
72. which in turn returns the session information to the 
invoking Java applet 74 via Web server 16 and Web 
Browser 18. The Java applet 74 caches the session 
information and makes the session information availa- 
ble through the Java session class. 
[0035] Using the present invention, the user of a Web 
session application need only specify, or the session 
application determine, certain session information one 
time. This session information, such as the user's role, 
the user's login, Web and OS locale, selected nodes, 
etc., is then common to ail session applications. This 
saves the user time since it is no longer necessary to 
provide this type of environment and contextual infor- 
mation each time a new application is launched. 
Another advantage of the present invention is the con- 
sistency it provides. The sharing of contextual informa- 
tion between applications of a Web session necessarily 
provides more consistency between the session appli- 
cations than in the prior art. Without the Web session 
mechanism of the present invention, each application 
started from the Web browser would potentially need to 
authenticate the user and query for configuration 



parameters to set its environment This environment 
would be specific to that Web application. There is no 
guarantee that separately started Web applications will 
have the same environment. The Web session concept 

5 allows multiple applications to be tied together and 
operate with a single environment. 
[0036] While the invention has been particularly 
shown and described with reference to a preferred 
embodiment, it will be understood by those skilled in the 

10 art that various changes in form and detail may be made 
therein without departing from the spirit and scope of 
the invention. 

Claims 

15 

1. A method for the sharing of session environment 
information between session applications during a 
Web user interface session, comprising: 

20 logging in the user of the Web user interface 

session (22); 

initiating a Web user interface session and 
defining an environment of the Web user inter- 
ns face session having a plurality of session prop- 
erties (40): 

opening an initial session application of the 
Web user interface session that has the plural- 
30 ity of session properties of the environment 

(50); and 

sharing the plurality of session properties of the 
environment of the Web user interface session 
35 with any session application of one or more 

session applications that are subsequently 
opened during the Web user interface session 
(60. 70). 

40 2. The method of claim 1, wherein opening the initial 
session application of the Web user interface ses- 
sion occurs when the user requests a launch pro- 
gram (1 4) via a web browser (1 8) that opens up the 
initial session application. 

45 

3. The method of claim 1 , wherein sharing the envi- 
ronment of the Web user interface session with one 
or more session applications that are subsequently 
opened further comprises: 

so 

connecting a session application of the one or 
more session applications to a port associated 
with a session manager program (20) that 
maintains the plurality of session properties of 
55 the environment of the Web user interface ses- 

sion; 

providing a session number, a remote IP 
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address of the Web user interface session, and 
a request for the plurality of session properties 
of the environment to the session manager pro- 
gram (20); and 

if the session number and the remote IP 
address are validated, providing the session 
application with the plurality of session proper- 
ties of the environment from the session man- 
ager program (20). 



invoking a universal resource locator by a Web 
browser (18); 

sending a request to a web server (16) to start 
a common gateway interface program (62) 
identified by the universal resource locator, 
wherein the common gateway interface pro- 
gram (62) is linked with a C session application 
programming interface library (64) that con- 
tains a plurality of C session application pro- 
gramming interface calls; 

providing a session number to a session man- 
ager program (20) that maintains a plurality of 
session properties of an environment of the 
Web user interface session by an interprocess 
communication mechanism in order to validate 
the Web user interface session; 

if the session manager identifies the Web user 
interface session, returning the plurality of ses- 
sion properties of the environment from the 
session manager program (20) to the C ses- 
sion application programming interface library 
(64); and 



w 



The method of claim 1 , wherein the plurality of ses- 
sion properties of the environment of the Web user 
interface session comprise a user name, a user 
role, and a locale. is 

A method for sharing session environment informa- 
tion with common gateway interface programs dur- 
ing a Web user interface session, comprising: 
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invoking a universal resource locator by a Web 
browser (18); 

sending a request to a Web server (16) to start 
a common gateway interface program (72) 
identified by the universal resource locator, 
wherein the common gateway interface pro- 
gram (72) is linked with a C session application 
programming interface library (64) that con- 
tains a plurality of C session application pro- 
gramming interface calls; 

providing a session number to a session man- 
ager program (20) that maintains a plurality of 
session properties of an environment of the 
Web user interface session by an interprocess 
communication mechanism in order to validate 
the Web user interface session; 

if the session manager identifies the Web user 
interface session, returning the plurality of ses- 
sion properties of the environment from the 
session manager program (20) to the C ses- 
sion application programming interface Itorary 
(64): 

providing the plurality of session properties 
from the C session application programming 
interface library (64) to the common gateway 
interface program (72); and 

providing the plurality of session properties 
from the common gateway interface program 
(72) to the Java applet (74) through the Web 
server (16) and the Web browser (18). 

The method of claim 7, wherein the universal 
resource locator is invoked by the Web browser 
(18) through a Java applet (74). 



providing the plurality of session properties 
from the C session application programming 
interface library (64) to the common gateway 
interface program (62). so 

The method of claim 5. wherein the universal 
resource locator is invoked by the Web browser 
(18) through a Java launcher applet. 



7. A method for sharing session environment informa- 
tion with Java applets during a Web user interface 
session, comprising: 
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